Planote Privacy Policy
Last Updated: September 29, 2026
Last Updated: September 29, 2026
1. About This Policy
Planote is a note-taking and productivity application operated by SarıLab (“Planote,” “we,” “us,” or “our”).
This Privacy Policy explains what information Planote processes, why it is processed, how it may be shared, how long it is retained, and the choices available to you.
This policy applies to the Planote Android application and related cloud services.
2. Information We Process
Depending on the features you use, Planote may process the following categories of information.
Account Information
When you create or connect an account, we may process:
Email address
Display name
Profile picture
Authentication provider, such as Google or email
Internal account identifier
Account creation and last sign-in timestamps
Your password is handled by the relevant authentication provider. Planote does not store your password in readable form.
Notes and User Content
Content you create may include:
Notes and formatted text
Checklists and tasks
Tags and note colors
Images
Audio recordings
Drawings
Code blocks
Reminder settings
Archive and trash status
Content may be stored locally on your device. If you sign in and use cloud synchronization, eligible content is also uploaded to and stored through Firebase services.
We do not claim that note content is end-to-end encrypted. Cloud data is protected using access controls, provider security measures and encryption in transit.
Device and Technical Information
We or our service providers may process:
Device model and manufacturer
Android and app version
Language and regional settings
Application installation identifiers
Network and connection information
IP address
Session timestamps
App integrity or security verification tokens
This information is used to operate the service, maintain compatibility, prevent abuse and protect cloud resources.
Diagnostics and Usage Information
Firebase Analytics and Firebase Crashlytics may process application interactions, crash reports, stack traces, relevant application state, device metadata, performance information and installation identifiers.
We use this information to understand feature usage, diagnose crashes and improve reliability. Crash reports are not intended to contain the contents of your notes.
Advertising Information
The free version of Planote may display advertisements through Google AdMob.
Depending on your device settings, region and consent choices, Google Mobile Ads may process information such as:
IP address and approximate location inferred from it
Advertising ID and other device or app identifiers
Ad views, clicks and other interactions
Diagnostic and performance information
Fraud-prevention signals
Where legally required, consent choices are presented before personalized advertising data is used. You may also manage advertising settings through your Android or Google account settings.
Subscription and Purchase Information
Premium subscriptions are purchased through Google Play and managed with RevenueCat.
Planote and RevenueCat may process:
Subscription status and entitlement
Product and purchase identifiers
Google Play purchase token
Purchase, renewal and expiration timestamps
App user identifier
Device, app and operating system information
Planote does not directly collect or store your complete payment card details. Payments are processed by Google Play.
Security and Audit Information
To protect accounts and investigate misuse, we may record security events such as sign-in, sign-out, account restoration, data export and account deletion requests.
These records may include the event type, timestamp, IP address, user agent, device information and internal account identifier.
3. Device Permissions
Planote may request the following Android permissions when needed:
Camera: To capture and attach images
Microphone: To create voice notes or audio recordings
Photos and files: To select, import, save or export media and documents
Notifications: To display reminders and application notifications
Alarms and reminders: To schedule time-sensitive reminders
Network access: To synchronize data, authenticate accounts, display advertisements and process subscriptions
Permission access is requested in context where required. You can revoke most permissions through Android settings, although the related feature may stop working.
4. How We Use Information
We process information to:
Provide note-taking, media, reminder and organization features
Create, authenticate and manage accounts
Synchronize content across devices
Restore user content and sessions
Process and verify subscriptions
Generate exports requested by the user
Display and measure advertisements
Diagnose crashes and technical problems
Prevent fraud, abuse and unauthorized access
Comply with applicable legal obligations
Respond to support, privacy and security requests
Depending on applicable law, processing may be based on performance of a contract, legitimate interests, consent or compliance with legal obligations.
You may withdraw consent-based permissions or choices at any time. Withdrawal does not affect processing already completed lawfully.
5. Service Providers and Data Sharing
We do not sell your personal information.
We may share or allow processing of information by service providers only where necessary to operate Planote:
Google Firebase: Authentication, Firestore database, Cloud Storage, Cloud Functions, Analytics, Crashlytics and App Check
Google Play Services: Authentication, integrity checks and Android platform services
Google AdMob: Advertising, ad measurement and fraud prevention
Google Play Billing: Payment and subscription processing
RevenueCat: Subscription verification and entitlement management
These providers process information under their own contractual and privacy terms:
Google Privacy Policy: https://policies.google.com/privacy
Firebase Privacy and Security: https://firebase.google.com/support/privacy
RevenueCat Privacy Policy: https://www.revenuecat.com/privacy-policy
We may also disclose information when required by law, necessary to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
6. International Data Transfers
Our service providers may process information in countries other than the country where you live, including the United States.
Where required, international transfers are protected through contractual safeguards, adequacy mechanisms or other legally recognized transfer methods used by the relevant service provider.
7. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this policy.
Local content remains on your device until you delete it, clear application data or uninstall the app.
Synchronized content is normally retained while your account remains active.
Crash, analytics and advertising data is retained according to our configuration and the applicable provider’s retention practices.
Subscription and transaction records may be retained where necessary for payment verification, fraud prevention, accounting or legal compliance.
Information that has been anonymized so it can no longer be linked to you may be retained for statistical and service-improvement purposes.
8. Account and Data Deletion
You can initiate account deletion from the account settings within Planote. You may also submit a deletion request through Planote’s external account-deletion page or by contacting us.
When deletion is requested:
Your account is disabled and you are signed out.
A 30-day recovery period begins.
If you sign in again during this period and choose to restore the account, the deletion request is cancelled.
After the recovery period, permanent deletion of the account and associated active cloud data begins.
Permanent deletion includes the Planote authentication account, synchronized notes and associated media under our control. Completion may require additional processing time because deletion jobs are performed securely and may involve multiple service providers.
Some information may remain temporarily in encrypted backups or be retained when required for security, fraud prevention, financial recordkeeping or legal compliance. Such information is isolated from normal use and deleted or anonymized when the applicable retention period ends.
Deleting Planote does not automatically cancel an active Google Play subscription. Subscriptions must be managed or cancelled through Google Play.
9. Your Privacy Rights
Depending on where you live, you may have the right to:
Request access to your personal information
Correct inaccurate or incomplete information
Download or obtain a copy of your information
Request deletion of your account and associated information
Restrict or object to certain processing
Withdraw consent where processing is based on consent
Submit a complaint to your local data-protection authority
Some information can be reviewed, edited, exported or deleted directly within Planote. Other requests may be submitted using the contact details below.
We may need to verify your identity before completing a request.
10. Security
We use reasonable technical and organizational safeguards, including authenticated access, database and storage security rules, application-integrity checks and encryption in transit.
No online system or storage method can be guaranteed to be completely secure. You should protect your device and account credentials and notify us if you suspect unauthorized access.
11. Children’s Privacy
Planote is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.
Where local law requires a higher minimum age for independent consent, users must meet that requirement or use the service with authorization from a parent or legal guardian.
If you believe a child has provided personal information without appropriate authorization, contact us so that we can investigate and take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy when Planote’s features, service providers or legal obligations change.
Material changes will be communicated through the application, store listing or another appropriate method. The effective date at the top identifies the latest version.
13. Contact
For privacy questions, account deletion requests or data-rights requests:
Operator: SarıLab
Application: Planote
Email: sarilab.dev@gmail.com